Two clocks are running at once. Q-Day is when quantum computers break today's encryption, and under the EU's roadmap, high-risk use cases come off quantum-vulnerable crypto by 2030. The other clock is AI: attackers run reconnaissance and lateral movement through agents faster than any human team. Anthropic's GTG-1002 report, published last year, put a number on it: 80 to 90% of a real intrusion, run by the model alone.

They compound each other. HNDL (harvest now, decrypt later) means stolen data waits for Q-Day, and AI-speed attacks mean that data was already taken way before most teams noticed.

The session works through the inventory-first path into a PQC migration, what defending against a machine-speed attacker looks like day to day, and how much crypto-agility the next transition demands.